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AMENDMENTS TO THE CLAIMS 

Upon entry of this amendment, the following listing of claims will replace all prior 
versions and listings of claims in the pending application. 
Listing of Claims 

L (Currently amended) A method for virtualizing access to native resources, the method 
comprising: 

receiving a request to access a first native resource provided by an operating system from 
a process executing within a context of an isolation environment including an application 
isolation layer and a user isolation layer, the request including a virtual name for the first native 
resource; 

determining that a rule action specifying remap -redirection is associated with the virtual 
name included in the received request; 

forming a literal name for the native resource responsive to the rule action and the virtual 
name , the literal name identifying a literal- second native resource eff- having the same type as the 
requested resource; and 

issuing to the operating system a request to access the second native resource, the request 
including the determined formed literal name for the native resourc e. 

2. (Currently amended) The method of claim 1 wherein receiving a request to access a first 
native resource comprises: receiving a request from a process executing in the context of an 
isolation environment to access a first named system object, the request including a virtual name 
for the first named system object. 

3. (Cancelled). 

4. (Currently amended) The method of claim 1 wherein receiving a request to access a native 
resource comprises: receiving a request from a process executing in the context of an isolation 
environment to access a first file system element, the request including a virtual name for the 
first file system element. 
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5. (Cancelled). 

6. (Currently amended) The method of claim 1 wherein receiving a request to access a native 
resource comprises: receiving a request from a process executing in the context of an isolation 
environment to access a first registry key, the request including a virtual name for the first 
registry key. 

7. (Cancelled), 

8. (Currently amended) The method of claim 1 wherein receiving a request to access a native 
resource comprises: receiving a request from a process executing in the context of an isolation 
environment to access one of a first window and a first window class, the request including one 
of a virtual name for the first window and a virtual name for the first window class. 



9. (Cancelled). 

10. (Currently amended) The method of claim 1 wherein forming a literal name further 
comprises: 

accessing a rules engine to determine a rule action associated with the virtual name 
received in the request; and 

forming a literal name for the first native resource responsive to the determined rule, the 
formed literal name identifying a literal- second native resource of the same type as the requested 
resource. 

11. (Currently amended) The method of claim 1 further comprising: receiving a handle from the 
operating system identifying the acc e ssed object second native resource . 

12. (Previously Presented) The method of claim 1 1 further comprising: transmitting the handle to 
the process. 
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13. (Cancelled). 

14. (Currently amended) A computer implemented apparatus virtualizing access to native 
resources provided by an operating system executing on a processor of a computer a«4 
v i rtual i z i ng access to nativ e resources , the apparatus comprising: 

a hooking mechanism receiving a request to access a first native resource from a process 
executing in the context of an isolation environment including an application isolation layer and 
a user isolation layer, the request including a virtual name for the first native resource; 

a rules engine storing a rule action associated with the virtual name included in the 
received request, the rule action specifying fema ^redi reel ion ; 

a name virtualization engine forming a literal name for the native resourc e , the formed 
literal nam e identifying a literal -second native resource of the same type as the requested 
resource; and 

an interface of an operating system executing on a processor of a computer, the interface 

requesting access to the identified tite ^second n ative resource. 

15. (Currently amended) The apparatus of claim 14 wherein the hooking mechanism intercepts a 
request to open a first native resource. 

16. (Currently amended) The apparatus of claim 14 wherein the hooking mechanism intercepts a 
request to create a first native resource. 

17. (Cancelled). 

18. (Previously Presented) The apparatus of claim 14 wherein the rules engine comprises a 
database. 

19. (Cancelled) 

20. (Original) The apparatus of claim 14 wherein the hooking mechanism comprises a file 
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system filter driver. 

21. (Original) The apparatus of claim 14 wherein the hooking mechanism comprises a mini- 
filter. 

22. (Original) The apparatus of claim 14 wherein a native file system comprises the hooking 
mechanism. 
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